Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/oNfvX77TlzBgLwKs2HidnG2vpl0.roa
File: oNfvX77TlzBgLwKs2HidnG2vpl0.roa (raw, json)
Hash identifier: lOyZ5PCShyp96P23Z0w2qn9mt0wzOgRsoj1HBzeCATI=
Subject key identifier: A0:D7:EF:5F:BE:D3:97:30:60:2F:02:AC:D8:78:9D:9C:6D:AF:A6:5D
Certificate issuer: /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial: 018EA8281D7F8779BE45084718942BC93E11
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/oNfvX77TlzBgLwKs2HidnG2vpl0.roa
Signing time: Thu 04 Apr 2024 08:09:44 +0000
ROA not before: Thu 04 Apr 2024 08:09:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206067
IP address blocks: 92.40.0.0/15 maxlen: 15
92.40.0.0/20 maxlen: 20
92.40.16.0/20 maxlen: 20
92.40.32.0/20 maxlen: 20
92.40.48.0/20 maxlen: 20
92.40.64.0/20 maxlen: 20
92.40.80.0/20 maxlen: 20
92.40.96.0/20 maxlen: 20
92.40.112.0/20 maxlen: 20
92.40.128.0/19 maxlen: 19
92.40.160.0/21 maxlen: 21
92.40.168.0/21 maxlen: 21
92.40.168.0/23 maxlen: 23
92.40.170.0/23 maxlen: 23
92.40.172.0/23 maxlen: 23
92.40.174.0/23 maxlen: 23
92.40.176.0/20 maxlen: 20
92.40.176.0/23 maxlen: 23
92.40.178.0/23 maxlen: 23
92.40.180.0/23 maxlen: 23
92.40.182.0/23 maxlen: 23
92.40.184.0/23 maxlen: 23
92.40.186.0/23 maxlen: 23
92.40.188.0/23 maxlen: 23
92.40.190.0/23 maxlen: 23
92.40.192.0/19 maxlen: 19
92.40.192.0/23 maxlen: 23
92.40.194.0/23 maxlen: 23
92.40.196.0/23 maxlen: 23
92.40.198.0/23 maxlen: 23
92.40.200.0/23 maxlen: 23
92.40.202.0/23 maxlen: 23
92.40.204.0/23 maxlen: 23
92.40.208.0/23 maxlen: 23
92.40.210.0/23 maxlen: 23
92.40.212.0/23 maxlen: 23
92.40.214.0/23 maxlen: 23
92.40.216.0/23 maxlen: 23
92.40.218.0/23 maxlen: 23
92.40.240.0/21 maxlen: 21
92.40.245.0/24 maxlen: 24
92.40.248.0/21 maxlen: 21
92.40.248.0/24 maxlen: 24
92.41.0.0/20 maxlen: 20
92.41.16.0/20 maxlen: 20
92.41.32.0/20 maxlen: 20
92.41.48.0/20 maxlen: 20
92.41.64.0/20 maxlen: 20
92.41.80.0/22 maxlen: 22
92.41.84.0/22 maxlen: 22
92.41.88.0/22 maxlen: 22
92.41.92.0/22 maxlen: 22
92.41.96.0/19 maxlen: 19
92.41.128.0/20 maxlen: 20
92.41.144.0/21 maxlen: 21
92.41.156.0/22 maxlen: 22
92.41.160.0/21 maxlen: 21
92.41.176.0/20 maxlen: 20
92.41.208.0/20 maxlen: 20
92.41.224.0/20 maxlen: 20
92.41.251.0/24 maxlen: 24
94.196.0.0/15 maxlen: 15
94.196.0.0/18 maxlen: 18
94.196.64.0/20 maxlen: 20
94.196.80.0/20 maxlen: 20
94.196.96.0/20 maxlen: 20
94.196.112.0/20 maxlen: 20
94.196.128.0/20 maxlen: 20
94.196.144.0/20 maxlen: 20
94.196.160.0/19 maxlen: 19
94.196.192.0/20 maxlen: 20
94.196.208.0/20 maxlen: 20
94.196.224.0/19 maxlen: 19
94.197.0.0/19 maxlen: 19
94.197.32.0/20 maxlen: 20
94.197.48.0/20 maxlen: 20
94.197.64.0/19 maxlen: 19
94.197.96.0/21 maxlen: 21
94.197.104.0/21 maxlen: 21
94.197.112.0/21 maxlen: 21
94.197.128.0/21 maxlen: 21
94.197.136.0/21 maxlen: 21
94.197.144.0/21 maxlen: 21
94.197.152.0/21 maxlen: 21
94.197.160.0/21 maxlen: 21
94.197.168.0/21 maxlen: 21
94.197.176.0/21 maxlen: 21
94.197.184.0/21 maxlen: 21
94.197.192.0/18 maxlen: 18
185.153.236.0/24 maxlen: 24
185.153.237.0/24 maxlen: 24
185.153.238.0/24 maxlen: 24
185.153.239.0/24 maxlen: 24
188.28.0.0/15 maxlen: 15
188.28.0.0/20 maxlen: 20
188.28.16.0/20 maxlen: 20
188.28.32.0/20 maxlen: 20
188.28.48.0/20 maxlen: 20
188.28.64.0/20 maxlen: 20
188.28.80.0/20 maxlen: 20
188.28.96.0/20 maxlen: 20
188.28.112.0/20 maxlen: 20
188.28.128.0/19 maxlen: 19
188.28.160.0/19 maxlen: 19
188.28.192.0/18 maxlen: 18
188.29.0.0/20 maxlen: 20
188.29.16.0/20 maxlen: 20
188.29.32.0/20 maxlen: 20
188.29.48.0/20 maxlen: 20
188.29.64.0/20 maxlen: 20
188.29.80.0/20 maxlen: 20
188.29.96.0/20 maxlen: 20
188.29.112.0/20 maxlen: 20
188.29.128.0/19 maxlen: 19
188.29.160.0/22 maxlen: 22
188.29.184.0/21 maxlen: 21
188.29.192.0/20 maxlen: 20
188.29.208.0/20 maxlen: 20
188.29.224.0/20 maxlen: 20
188.29.240.0/21 maxlen: 21
188.29.248.0/22 maxlen: 22
188.30.0.0/15 maxlen: 15
188.30.0.0/21 maxlen: 21
188.30.8.0/21 maxlen: 21
188.30.16.0/21 maxlen: 21
188.30.24.0/21 maxlen: 21
188.30.32.0/19 maxlen: 19
188.30.64.0/22 maxlen: 22
188.30.68.0/22 maxlen: 22
188.30.72.0/22 maxlen: 22
188.30.76.0/22 maxlen: 22
188.30.80.0/22 maxlen: 22
188.30.84.0/22 maxlen: 22
188.30.96.0/19 maxlen: 19
188.30.128.0/21 maxlen: 21
188.30.136.0/21 maxlen: 21
188.30.144.0/21 maxlen: 21
188.30.152.0/21 maxlen: 21
188.30.160.0/19 maxlen: 19
188.30.192.0/21 maxlen: 21
188.30.200.0/21 maxlen: 21
188.30.208.0/20 maxlen: 20
188.30.224.0/20 maxlen: 20
188.30.240.0/21 maxlen: 21
188.31.0.0/21 maxlen: 21
188.31.8.0/21 maxlen: 21
188.31.16.0/21 maxlen: 21
188.31.24.0/21 maxlen: 21
188.31.32.0/19 maxlen: 19
188.31.64.0/22 maxlen: 22
188.31.68.0/22 maxlen: 22
188.31.72.0/22 maxlen: 22
188.31.76.0/22 maxlen: 22
188.31.80.0/22 maxlen: 22
188.31.84.0/22 maxlen: 22
188.31.88.0/22 maxlen: 22
188.31.92.0/22 maxlen: 22
188.31.96.0/20 maxlen: 20
188.31.112.0/20 maxlen: 20
188.31.128.0/19 maxlen: 19
188.31.160.0/20 maxlen: 20
188.31.176.0/20 maxlen: 20
188.31.192.0/21 maxlen: 21
188.31.200.0/21 maxlen: 21
188.31.208.0/21 maxlen: 21
188.31.224.0/20 maxlen: 20
188.31.248.0/23 maxlen: 23
188.31.250.0/24 maxlen: 24
188.31.251.0/24 maxlen: 24
188.31.252.0/24 maxlen: 24
188.31.254.0/24 maxlen: 24
217.171.128.0/20 maxlen: 20
2a04:4a43:4000::/34 maxlen: 34
2a04:4a43:4000::/39 maxlen: 39
2a04:4a43:4200::/39 maxlen: 39
2a04:4a43:4400::/40 maxlen: 40
2a04:4a43:4500::/40 maxlen: 40
2a04:4a43:4600::/40 maxlen: 40
2a04:4a43:4700::/40 maxlen: 40
2a04:4a43:4800::/40 maxlen: 40
2a04:4a43:4900::/40 maxlen: 40
2a04:4a43:4a00::/40 maxlen: 40
2a04:4a43:4b00::/40 maxlen: 40
2a04:4a43:4c00::/40 maxlen: 40
2a04:4a43:4d00::/40 maxlen: 40
2a04:4a43:4e00::/40 maxlen: 40
2a04:4a43:4f00::/40 maxlen: 40
2a04:4a43:5000::/40 maxlen: 40
2a04:4a43:5100::/40 maxlen: 40
2a04:4a43:5200::/40 maxlen: 40
2a04:4a43:5300::/40 maxlen: 40
2a04:4a43:5400::/40 maxlen: 40
2a04:4a43:5500::/40 maxlen: 40
2a04:4a43:5600::/40 maxlen: 40
2a04:4a43:5700::/40 maxlen: 40
2a04:4a43:5800::/40 maxlen: 40
2a04:4a43:8000::/34 maxlen: 34
2a04:4a43:8400::/40 maxlen: 40
2a04:4a43:8500::/40 maxlen: 40
2a04:4a43:8600::/40 maxlen: 40
2a04:4a43:8700::/40 maxlen: 40
2a04:4a43:8800::/40 maxlen: 40
2a04:4a43:8900::/40 maxlen: 40
2a04:4a43:8a00::/40 maxlen: 40
2a04:4a43:8b00::/40 maxlen: 40
2a04:4a43:8c00::/40 maxlen: 40
2a04:4a43:8d00::/40 maxlen: 40
2a04:4a43:8e00::/40 maxlen: 40
2a04:4a43:8f00::/40 maxlen: 40
2a04:4a43:9000::/40 maxlen: 40
2a04:4a43:9100::/40 maxlen: 40
2a04:4a43:9200::/40 maxlen: 40
2a04:4a43:9300::/40 maxlen: 40
2a04:4a43:9400::/40 maxlen: 40
2a04:4a43:9500::/40 maxlen: 40
2a04:4a43:9600::/40 maxlen: 40
2a04:4a43:9700::/40 maxlen: 40
2a04:4a43:9800::/40 maxlen: 40
2a04:4a45::/32 maxlen: 32
2a04:4a45:9::/48 maxlen: 48
2a04:4a45:a::/48 maxlen: 48
2a04:4a45:b::/48 maxlen: 48
2a04:4a45:c::/48 maxlen: 48
2a04:4a45:d::/48 maxlen: 48
2a04:4a45:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:28:1d:7f:87:79:be:45:08:47:18:94:2b:c9:3e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
Validity
Not Before: Apr 4 08:09:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0d7ef5fbed39730602f02acd8789d9c6dafa65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:dd:85:f7:2f:a6:3a:92:21:c4:09:01:36:
4f:69:52:61:77:3a:3f:52:c9:87:87:e7:39:dc:5d:
92:00:85:e1:16:09:44:36:de:3c:50:c3:fb:71:10:
e5:f9:35:c8:2a:9e:82:09:e7:c0:3c:d5:1a:ad:6d:
2e:34:96:2f:2e:17:3e:d8:1f:96:92:fb:ef:54:49:
1e:b7:35:02:08:f9:63:31:85:99:f9:38:92:0b:ef:
fc:30:3f:1a:ed:66:2b:67:4e:6d:1c:4b:61:fc:f1:
e3:0b:43:fc:e1:d8:94:29:04:f8:da:55:59:27:85:
c9:38:35:e3:84:ab:fd:fc:ea:6e:b2:a0:58:cc:7a:
a0:ed:31:31:a9:03:cc:5a:c2:7b:72:0c:b5:b8:90:
50:c0:be:53:17:73:e3:dc:3a:70:a3:8a:50:10:6b:
16:25:1c:02:9c:59:d4:86:1e:50:61:4b:34:fd:03:
6b:6d:18:b1:65:f2:22:31:d5:44:b9:2d:76:59:2f:
a5:4b:14:f7:c4:8e:ec:28:66:0d:96:60:6d:8c:5f:
a3:81:65:48:c1:6b:e3:c6:1d:95:33:d9:61:7e:a9:
bd:04:ef:3a:7c:f1:75:c9:c0:f6:a3:49:59:63:b3:
4c:6a:c4:40:dc:9e:ed:d1:44:01:dd:78:19:58:bd:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D7:EF:5F:BE:D3:97:30:60:2F:02:AC:D8:78:9D:9C:6D:AF:A6:5D
X509v3 Authority Key Identifier:
keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/oNfvX77TlzBgLwKs2HidnG2vpl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.40.0.0/15
94.196.0.0/15
185.153.236.0/22
188.28.0.0/14
217.171.128.0/20
IPv6:
2a04:4a43:4000::-2a04:4a43:bfff:ffff:ffff:ffff:ffff:ffff
2a04:4a45::/32
Signature Algorithm: sha256WithRSAEncryption
74:49:1f:fa:5a:29:9d:31:39:d4:83:2e:95:7f:49:09:f0:6b:
61:8e:36:d7:04:b1:25:18:4d:1f:16:84:a1:46:b5:34:c7:d7:
33:fa:62:4d:42:9b:4c:a8:57:3e:f6:a6:3a:ba:68:bd:ef:cf:
68:ec:29:45:77:90:93:95:fd:5d:ef:2b:d8:78:3a:ef:55:bf:
87:fe:87:69:65:b7:59:6a:08:c0:21:bd:5a:78:e2:df:6a:5e:
0f:6d:96:84:78:66:cd:8e:a9:87:ad:3d:12:80:b5:02:20:7a:
83:1b:92:aa:8d:ad:8b:2a:b9:2b:16:2b:d0:23:a1:e7:eb:f8:
8d:9f:35:27:1d:7e:31:ff:a9:41:01:c0:9f:d8:f4:49:ae:ad:
23:ce:63:a2:26:49:a9:c9:85:f4:71:c8:98:6e:b4:88:b0:0a:
0b:a9:98:60:c4:bd:01:24:f3:0c:c1:a2:2f:e2:23:90:3e:c6:
8b:52:a8:06:b6:fe:f5:ea:97:dd:4e:c1:28:53:bb:a2:e3:16:
93:27:b4:f0:e9:a2:6c:a9:06:e6:af:a9:c8:81:0d:43:c9:57:
a9:ea:17:f6:24:55:4f:e1:b1:1a:65:f1:4f:fa:1a:39:ac:53:
45:98:1c:88:36:e0:a7:66:e2:9e:75:31:c8:f2:ec:d8:71:2b:
97:36:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 09:55:10 2024 by rpki-client on console-fra.rpki-client.org